-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
The identification of vulnerable functions is based on the analysis of the descriptions provided, particularly the discussion on SourceForge about the bug. The functions BasicProfile.resolve and BasicProfileSection.fetch are pinpointed as the source of the recursive calls leading to the DoS vulnerability.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| org.ini4j:ini4j | maven | < 0.5.4 | 0.5.4 |
Ongoing coverage of React2Shell